CVE-2011-3829

CVE-2011-3829 describes an information disclosure vulnerability in Support Incident Tracker (SiT!) version 3.65. An authenticated remote attacker can exploit a flaw in ftp_upload_file.php by manipulating the filename, causing an error message that reveals the full installation path of the application. This vulnerability has a CVSS score of 4.0, indicating a medium severity, as it requires authentication and only leads to information disclosure (C:P/I:N/A:N). While not actively exploited in the wild (KEV: No), a Metasploit module exists for remote command execution, suggesting potential for more severe impact than initially assessed. Despite the availability of exploit code, there is minimal community discussion or media coverage surrounding this CVE.